diff --git a/.env-dist b/.env-dist
new file mode 100644
index 0000000..691bd6e
--- /dev/null
+++ b/.env-dist
@@ -0,0 +1,2 @@
+# site fqdn
+TRF_HOST=portainer-dev.gmolab.net
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..2eea525
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+.env
\ No newline at end of file
diff --git a/README.md b/README.md
index 132f89e..047d9ef 100644
--- a/README.md
+++ b/README.md
@@ -11,6 +11,9 @@ sudo mkdir -p /home/docker/portainer/data
 ### Certificats
 Copy crt and key files on `/home/docker/certs/`
 
+## Environment
+Copy `.env-dist` to `.env` file and adapt as your needs
+
 ## Run
 ```bash
 docker compose up -d
diff --git a/docker-compose.yaml b/docker-compose.yaml
index d9818c7..8d49476 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -1,5 +1,6 @@
 services:
   portainer:
+    env_file: .env
     # if behind proxy
 #    command: --trusted-origins=portainer.vdglab.net
     # without proxy
@@ -21,7 +22,7 @@ services:
       - /var/run/docker.sock:/var/run/docker.sock
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.portainer.rule=Host(`portainer.vdglab.net`)"
+      - "traefik.http.routers.portainer.rule=Host(`${TFK_HOST}`)"
       - "traefik.docker.network=traefik-net"      
       - "traefik.http.routers.portainer.entrypoints=websecure"
       - "traefik.http.routers.portainer.tls=true"